Control what your users can access and save time, money, and frustrations. Lock down sensitive data in SugarCRM or SuiteCRM to specific groups or teams. Supports unlimited assigned users, unlimited group assignments to records, custom layouts for each group, login/sudo capabilities and much more.
#2189 - Permissions problem
We upgraded from 6.5.12 (yes an old one) to 6.5.23 and now the users can get to meeting details but not to the person associated with the meeting. The error they get is: Error retrieving record. This record may be deleted or you may not be authorized to view it. I can get to the record fine as an admin. I did notice that a default group was added for the security group table. Could that be the problem?
-
"Outstanding plugin. Great flexibility - took a little time to learn about the options, but great to have them available." - tcorlett
Read More Reviews
- Most Recent Love from Users
kacsoristvan- damien8105
- anri
- Administrador
- Stefano1
- einkauf2
8 years ago
Did you upgrade SecuritySuite as well? If not, make sure to install the 6.5.23 version. You will need to run a Repair Roles and then do a Quick Repair & Rebuild just to be safe after installation. This can be found under Admin->Repair.
Make sure that the person has rights to view all Meetings or that they have the appropriate rights to Meetings. If Group rights and they are not assigned to the meeting as the "Assigned To" then their group will need to be associated to the meeting.
Hope this helps!
8 years ago
I did upgrade SecuritySuite, ran the Quick Repair and Rebuild but not the Repair Roles. It looks like that might have fixed it. Thanks! I will do some more testing and follow up.
8 years ago
Glad to help! Closing this out for now, but feel free to follow up if you need anything else.
8 years ago
There are still issues with layouts not showing correctly for the users and still some people that are associated with meetings that we can't get in to.
8 years ago
What sort of issues? With layouts, it will show either the default layout as defined in Studio or a custom layout based on the group that the user is in. You can create custom layouts for different groups in Studio by clicking on the Layouts folder for a module and copying existing layouts to a new group.
For meetings and a given user having troubles go to the user record in Sugar and check the Access tab to see what their permissions are for Meetings. The List and View permissions will help you determine whether the meeting is set correctly for them to view it or if their roles have insufficient rights.
8 years ago
We have layouts defined for each of the security groups. We also have the default defined. For the meetings and the users, the permissions look fine. It appears that the link in the dashlet is bad. I can go to the person from the meeting but the link to the person in the dashlet points to a non-existing person. It looks like we can work around the meetings and users. The other issue then is the layouts. Is it possible that I will just need to recreate the layouts? Is there some way to clear the caches for those since it appears to be working for some people in a security group and not for others? BTW, thanks for the quick responses.
8 years ago
If it is not working for those not in a security group then Apache may be running into a permissions issue with accessing those layouts. There should be no reason why that wouldn't work. It's possible that file permissions got slightly out of whack after upgrading. Even when permissions look right there may be a few files that are off. This is a great script to have permissions/ownership applied across the application. Adjust for your OS: http://www.shanedowling.com/sugarcrm-permissions-script/
Thanks for the additional info on the meetings/dashlet piece. I will look at that.
8 years ago
Tested the meetings dashlet on a clean 6.5.23 install and it worked just fine for both meetings assigned directly to a user and for those with the user's groups associated to a meeting. It sounds like you are running into some install issues. Not sure on the best path here for you. Perhaps a clean 6.5.23, point it at a backup of your existing database, and copy the /custom directory over? Then repair/rebuild.
8 years ago
I ran the script that you referenced. Thanks for that. Still getting the weirdness with layouts. Any other ideas where I can look?
8 years ago
Can you expand on what you are seeing?
8 years ago
I also just rebuilt roles and it looks like at least it is consistently NOT doing the layouts correctly now. Fixed would be better than broken but the consistency at least makes it easier.
8 years ago
Can you please expand on what you are seeing? Makes it impossible to help without an explanation. If you want to email me at solutions@eggsurplus.com temporary admin access along with what you are seeing I can take a look.
8 years ago
Sorry, I thought I had sent this off yesterday. I am afraid that I can't send access. It is a FERPA thing. Let me see if I can explain it. There is a panel in our AC security group layout that is not showing up for students, which is related to Meetings. It seems now, that no one in that security group can see the panel in question. Is this something I should just rebuild? I can do that. Thanks
8 years ago
This is a subpanel then? It is possible that the users who can't see it are in a role (directly or through their security groups) that have this panel's List/View rights set to None. You will need to look at a user who is having problems and check their Access tab to see what the rights are set to.
Can you export the module and panel that is related to Meetings and send that over at least? No data is needed.
8 years ago
They each have the same role, only one, that is set to list/view/edit ALL I would be happy to export, but I don't know how to do that. Can you send me a link that explains? Thanks
8 years ago
The easiest way to do this is to zip the whole Sugar directory and put it somewhere that I can download it from such as Dropbox. No data will be included in that. Remove the config.php and config_override.php from the zip so that all passwords are not included. I'll be able to figure it out from there.
8 years ago
It is a massive file (702MB), If I exclude the upload directory, it gets significantly smaller. Does that work?
8 years ago
Yes, the /upload directory is not needed. Thanks!
8 years ago
Thank you! I have the zip now. Please give me a few days to a week to look through this.
8 years ago
Thanks! I'm removing the link here as thus is public. I will let you know when I have downloaded it. Likely later this evening.
8 years ago
sounds good, it is 23 MB now, so much more manageable
8 years ago
Any more information on this?
8 years ago
There are too many issues with the current state of the application to do a from scratch install so I'll try my best to help without being able to spin that up. There are a number of customizations around security groups in the code base that may be causing what you are seeing. Which module are you having layout issues in? Can you take screenshots and/or do a recording to demonstrate the issue and send it to solutions@eggsurplus.com?
8 years ago
The problem is all related to the Student module, which is a custom module but based on User. I have since deleted and re-created the layout for the security group and now the layout that is displaying has the correct title but the wrong fields. I will get a couple screen shots to send you. thanks
8 years ago
The layouts for each group are saved in /custom/modules/[MODULE]/metadata/[SECURITYGROUP_ID]. See if the fields are wrong for the group there. They should be correct and if so then it's a conflict for a specific user who may be in multiple groups. This would cause another group's layout to display instead of the main one. You can mark a specific group as the "Primary" group for a user in order to display the desired layout by going to the user and in the Security Groups subpanel click on edit. Then check the Primary box and save.
Otherwise, I wonder if there is a conflict with some other add-on/customization that is causing the TemplateHandler to not load the correct group layout.
8 years ago
I checked the layouts and they are correct for the groups. I have just set a primary group for all the users having this issue but it doesn't seem to have fixed it. I will keep digging
8 years ago
I just got back from SugarCon and found someone else with a similar issue. Between the two cases I should have enough info to nail down how this is happening. Thank you for your patience!
8 years ago
Thanks for all your help! Glad that it wasn't just us
8 years ago
I still can't replicate this. Would you have time to hop on a call next week to walk through what you are seeing and perhaps do some debugging?
8 years ago
Sure, when works best for you?
8 years ago
How does 3pm central today work (~2 hours from now)?